CVE-2021-33945: Ricoh Aficio SP 3500sf Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

Affected products

Ricoh Aficio SP 3500sf Firmware: version 1.06 only
Ricoh M 2700 Firmware: affected versions not specified
Ricoh M 2701 Firmware: affected versions not specified
Ricoh M 320 Firmware: affected versions not specified
Ricoh M 320f Firmware: affected versions not specified
Ricoh M 320fb Firmware: affected versions not specified
Ricoh M c2000 Firmware: affected versions not specified
Ricoh M c250fw Firmware: affected versions not specified
Ricoh M c250fwb Firmware: affected versions not specified
Ricoh P 310 Firmware: affected versions not specified
Ricoh P 311 Firmware: affected versions not specified
Ricoh P c300w Firmware: affected versions not specified
Ricoh P c301w Firmware: affected versions not specified
Ricoh SP 212nw Firmware: affected versions not specified
Ricoh SP 212sfnw Firmware: affected versions not specified
Ricoh SP 212sfw Firmware: affected versions not specified
Ricoh SP 212snw Firmware: affected versions not specified
Ricoh SP 212suw Firmware: affected versions not specified
Ricoh SP 212w Firmware: affected versions not specified
Ricoh SP 213nw Firmware: affected versions not specified
Ricoh SP 213sfnw Firmware: affected versions not specified
Ricoh SP 213sfw Firmware: affected versions not specified
Ricoh SP 213snw Firmware: affected versions not specified
Ricoh SP 213suw Firmware: affected versions not specified
Ricoh SP 213w Firmware: affected versions not specified
and 41 more

Published 2022-02-15. Last modified 2026-06-17.